Senior Security Engineer - SOC

Noventiq Egypt; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Job summary

Noventiq Egypt in Kuala Lumpur seeks a Senior Security Engineer (L3 SOC) to be the highest technical escalation for customer-facing security operations, leading advanced investigations, threat hunting, and security engineering to improve monitoring effectiveness.

You will design detection content, mentor junior staff, and collaborate with customers on security reviews, onboarding, and playbooks to strengthen security across large enterprise environments.

Qualifications

• 5+ years in Security Operations.
• 2+ years in SIEM engineering or threat hunting.
• Proven experience with large enterprise security environments.
• Experience in customer-facing consulting and incident response activities.

Responsibilities

• Perform advanced investigation and validation of security incidents escalated from L1/L2 teams.
• Lead root cause analysis (RCA) for major security incidents.
• Provide recommendations and remediation guidance to customers.
• Support incident coordination during high-severity security events.
• Conduct proactive threat hunting activities.
• Research emerging threats, attack techniques, and adversary TTPs.
• Develop hunting queries and methodologies using MITRE ATT&CK framework.
• Design and develop SIEM detection rules and analytics.
• Improve alert quality through tuning and optimization.
• Create use cases, correlation rules, watchlists, and detection content.
• Validate data source coverage and logging requirements.
• Support deployment and optimization of Microsoft Sentinel and related security technologies.
• Assist with onboarding new log sources and integrations.
• Develop automation and response playbooks.
• Perform log analysis and data normalization activities.
• Participate in customer security reviews and technical workshops.
• Present investigation findings and technical recommendations.
• Act as trusted advisor for security monitoring improvements.
• Support onboarding of new customers and services.
• Review investigation quality and SOC processes.
• Mentor junior analysts and engineers.
• Develop SOPs, playbooks, and technical documentation.
• Share security knowledge across SOC teams.

Skills

Malware Analysis fundamentals

Threat Hunting

Security Monitoring

MITRE ATT&CK

Rule Development

Use Case Development

Windows Security

Active Directory

Education

SC-200

AZ-500

SC-100

GCIA / GCIH

Tools

Microsoft Sentinel

Job description

Full-Time

Job Description

Senior Security Engineer (L3 SOC)

Role Summary

The Senior Security Engineer (L3) serves as the highest technical escalation point for customer-facing security operations. The role is responsible for advanced threat investigation, incident response, threat hunting, security engineering, detection engineering, and continuous security improvement initiatives.

Unlike traditional SOC analyst roles, this position focuses on complex investigations, customer consultation, security use case development, and improving the overall effectiveness of security monitoring platforms.

Key Responsibilities

Security Operations

• Perform advanced investigation and validation of security incidents escalated from L1/L2 teams.
• Lead root cause analysis (RCA) for major security incidents.
• Provide recommendations and remediation guidance to customers.
• Support incident coordination during high-severity security events.

Threat Hunting

• Conduct proactive threat hunting activities.
• Research emerging threats, attack techniques, and adversary TTPs.
• Develop hunting queries and methodologies using MITRE ATT&CK framework.

Detection Engineering

• Design and develop SIEM detection rules and analytics.
• Improve alert quality through tuning and optimization.
• Create use cases, correlation rules, watchlists, and detection content.
• Validate data source coverage and logging requirements.

Security Platform Engineering

• Support deployment and optimization of Microsoft Sentinel and related security technologies.
• Assist with onboarding new log sources and integrations.
• Develop automation and response playbooks.
• Perform log analysis and data normalization activities.
• Participate in customer security reviews and technical workshops.
• Present investigation findings and technical recommendations.
• Act as trusted advisor for security monitoring improvements.
• Support onboarding of new customers and services.

Knowledge & Quality Management

• Review investigation quality and SOC processes.
• Mentor junior analysts and engineers.
• Develop SOPs, playbooks, and technical documentation.
• Share security knowledge across SOC teams.

Required Technical Skills

Security Operations

• Malware Analysis fundamentals
• Threat Hunting
• Security Monitoring

SIEM/XDR Platforms

• Microsoft Sentinel

Infrastructure Knowledge

• Windows Security
• Active Directory

Detection Engineering

• MITRE ATT&CK
• Rule Development
• Use Case Development

Preferred Certifications

• SC-200
• AZ-500
• SC-100
• GCIA / GCIH

Experience

• 5+ years in Security Operations.
• 2+ years in SIEM engineering or threat hunting.
• Proven experience with large enterprise security environments.
• Experience in customer-facing consulting and incident response activities.

Job Snapshot

Updated Date

11-10-2026

Job ID

Job_2243

Department

Services Delivery

Location